Vulnerabilities and security researches forclickcease-click-fraud-protection clickcease-click-fraud-protection

Jun 06, 2024

CVE, Research URL: CVE-2023-6810
Home page URL: Security reports for ClickCease Click Fraud Protection
Application: ClickCease Click Fraud Protection
Date: May 07, 2024
Research Description: The ClickCease Click Fraud Protection plugin for WordPress is vulnerable to unauthorized access of data due to an improper capability check on the get_settings function in all versions up to, and including, 3.2.4. This makes it possible for authenticated attackers, with author access and above, to retrieve the plugin's configured API keys.
Affected versions: max 3.2.5.
Status: vulnerable

CVE, Research URL: CVE-2024-33678
Home page URL: Security reports for ClickCease Click Fraud Protection
Application: ClickCease Click Fraud Protection
Date: Apr 26, 2024
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in eranfl ClickCease Click Fraud Protection clickcease-click-fraud-protection.This issue affects ClickCease Click Fraud Protection: from n/a through <= 3.2.7.
Affected versions: max 3.2.8.
Status: vulnerable

Nov 04, 2026

CVE, Research URL: CVE-2026-119509
Home page URL: Security reports for ClickCease Click Fraud Protection
Application: ClickCease Click Fraud Protection
Date: Nov 03, 2026
Research Description: Missing Authorization vulnerability in eranfl ClickCease Click Fraud Protection clickcease-click-fraud-protection allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickCease Click Fraud Protection: from n/a through 3.3.0.
Affected versions: max 3.3.1.
Status: vulnerable